Package: libpam-krb5
Version: 2.6-1
Severity: normal

Originally, I have this problem building with heimdal-dev:

logging.o: In function `pamk5_debug_krb5':
/home/build/libpam-krb5-2.6.work/logging.c:84: undefined reference to
`error_message'

I added -lcom_err to LIBS = in Makefile, allowing it to build with
heimdal-dev, but get

login[952]: (pam_krb5): jjackson: krb5_cc_initialize: Credential cache
name malformed

in syslog.  (have to add -n option to kcm daemon to fix that, then I
get:

login[1058]: (pam_krb5): jjackson: chown of ticket cache failed: No such
file or directory

which is silly, there is no ticket cache file with KCM.  So I had to
patch the source:

diff -ur libpam-krb5-2.6/logging.c libpam-krb5-2.6.work/logging.c
--- libpam-krb5-2.6/logging.c   2006-11-28 17:46:03.000000000 -0500
+++ libpam-krb5-2.6.work/logging.c      2007-03-05 09:30:38.670386000
-0500
@@ -11,6 +11,7 @@
 #include "config.h"

 #include <krb5.h>
+#include <com_err.h>
 #include <security/pam_appl.h>
 #include <security/pam_modules.h>
 #include <stdarg.h>
diff -ur libpam-krb5-2.6/pam_krb5_auth.c
libpam-krb5-2.6.work/pam_krb5_auth.c
--- libpam-krb5-2.6/pam_krb5_auth.c     2006-11-28 17:46:03.000000000
-0500
+++ libpam-krb5-2.6.work/pam_krb5_auth.c        2007-03-05
13:53:30.080038250 -0500
@@ -316,7 +316,7 @@
     krb5_ccache cache = NULL;
     char *cache_name = NULL;
     int reinit = 0;
-    int pamret, allow, status;
+    int pamret, allow, status = 0;
     struct passwd *pw = NULL;
     uid_t uid;
     gid_t gid;
@@ -486,7 +486,7 @@
         goto done;
     if (strncmp(cache_name, "FILE:", strlen("FILE:")) == 0)
         status = chown(cache_name + strlen("FILE:"), uid, gid);
-    else
+    else if (strchr (cache_name, ':') == NULL)
         status = chown(cache_name, uid, gid);
     if (status == -1) {
         pamk5_debug(ctx, args, "chown of ticket cache failed: %s",

There is an issue left now:

login[1430]: (pam_krb5): jjackson: krb5_cc_initialize: Credentials cache
file permissions incorrect

But i'm submitting this report because the patch makes sense on it's
own.

-- System Information:
Debian Release: 3.1
  APT prefers stable
  APT policy: (400, 'stable'), (300, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libpam-krb5 depends on:
ii  krb5-con 1.9                             Configuration files for
Kerberos V
ii  libc6    2.3.6-15                        GNU C Library: Shared
libraries
ii  libcomer 1.39+1.40-WIP-2006.11.14+dfsg-1 common error description
library
di  libkrb5- 0.7.2.dfsg.1-10                 Libraries for Heimdal
Kerberos
ii  libpam0g 0.79-4                          Pluggable Authentication
Modules l

libpam-krb5 recommends no packages.

-- no debconf information




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to